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(57) Abstract: Access to medical monitoring device service is controlled by inputting a set of identification data elements into a 
medical monitoring device system, which then establishes a communication link with a central unit and communicating the set of 
identification data elements to the central unit The medical monitoring device system and the central unit cooperatively determining 
whether the medical monitoring device may be activated for rendering medical monitoring device service, by evaluating the set of 
identification data elements as to whether they meet a set of basic structural requirements, and obtaining financial or other authoriza- 
tion from a third-party source. In the event that the identification data elements meet the set of basic structural requirements and the 
authorization is obtained, the central unit issues an activation signal to the medical monitoring device system over the communication 
link. 
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METHOD FOR CONTROLLING ACCESS 
TO MEDICAL MONITORING DEVICE SERVICE 
This invention relates to the rendering of medical monitoring device service 
and, more particularly, to ensuring that access to such service is authorized prior to 
commencing the service. 

BACKGROUND OF THE INVENTION 

Advances in sensor technology, electronics, and communications have made it 
possible for physiological characteristics of patients to be monitored even when the 
patients are ambulatory and not in continuous, direct contact with a hospital 
monitoring system. For example, US Patent 5,959,529 describes a monitoring system 
in which the patient carries a remote monitoring unit with associated physiological 
sensors. The remote monitoring unit conducts a continuous monitoring of one or 
more physiological characteristics of the patient according to the medical problem of 
the patient, such as the heartbeat and its waveform. 

One of the business problems associated with the use of such medical 
monitorin g devices is establishin g whether the patient's health-case-benefi t payer has 
authorized the use of the monitoring device and service. In the absence of a proper 
authorization, the patient may use the medical monitoring device and incur significant 
charges in the form of rental value of the medical monitoring device, telephone 
charges, charges at the central monitoring system, and charges by medical personnel, 
and the providers of those goods and services may not get paid. Bad debts are a 
continuing concern in the medical field generally. Bad debts are of even greater 
concern in the case of a portable medical monitoring device and its service where the 
physical control of the device is in the hands of a third party, such as a prescribing 
doctor, who does not own the medical monitoring device and is not responsible for 
improper charges. 

There is a need for an approach to controlling access to such medical 
monitoring devices and their services to ensure that only a properly authorized patient 
can obtain the service. The present invention fulfills this need, and further provides 
related advantages. 
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SUMMARY OF THE INVENTION 
The present invention provides a method for controlling access to medical 
monitoring devices and service. The approach ensures that service is initiated and 
continued only for persons who are properly authorized to have the service. The 
5 present approach activates the medical monitoring device and its service only for a 
person who provides proper identification data and is financially and otherwise 
properly authorized for the service. The chances of the wrong person being 
monitored are also reduced. The activation process is quick and largely transparent to 
the person seeking the service, other than the requirement for inputting the proper 
10 identification data. 

In accordance with the invention, a method for controlling access to medical 
monitoring device service comprises the steps of providing a medical monitoring 
device system having communications access to a central unit, inputting a set of 
identification data elements into the medical monitoring device system, the medical 

1 5 monitoring device system establishing a communication link with the central unit and 
communicating the set of identification data elements to the central unit, and the 
medical monitoring device system and the central unit cooperatively determin ing 
whether the medical monitoring device may be activated for rendering medical 
monitoring device service. The step of determining includes the steps of evaluating 

20 the set of identification data elements as to whether they meet a set of basic structural 
requirements, and obtaining authorization from a third-party source, which evaluating 
and obtaining steps are preferably done automatically. These evaluating and 
obtaining steps are typically performed by the central unit, but they may be 
distributed. In the event that the identification data elements meet the set of basic 

25 structural requirements and authorization is obtained, an activation signal is issued to 
the medical monitoring device system over the communication link. Third-party 
authorization sources include, for example, an insurance company, the social security 
administration, a credit-granting company, a physician, and a company responsible 
for the proper functioning of the medical monitoring device. 

30 In an application of particular interest, the medical monitoring device system 

comprises a patient-portable unit. It may also include a base station that 
communicates with the patient-portable unit and also communicates with the central 
unit. The base station receives the identification data element input and 
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communicates that information with the patient-portable unit and with the central unit 
as necessary by a land-line or a wireless communication link, as appropriate. The 
medical monitoring device system may aid the person seeking to gain access to 
service by locally performing a preliminary evaluation of the set of identification data 
5 elements as to whether they meet a set of format requirements, and providing an input 
diagnostic message in the event that the step of performing a preliminary evaluation 
determines that the set of identification data elements does not meet the set of format 
requirements. Such identification data elements may include, for example, a patient 
name, a patient address, a patient social security number, a patient sex, an 
10 identification of the third-party financial source, payment codes, and the name of the 
patient's physician. 

The activation signal may serve only to activate the medical monitoring device 
and its services, or the activation signal may serve as an identifier that is included in 
all subsequent communications between the medical monitoring device and the 
15 central unit. 

The present approach ensures that medical monitoring device services are 
provided to properly identified and authorized persons. It also ensures that all persons 
and agencies responsible for the medical monitoring device and the services are 
coordinated in their approval of rendering service to the particular patient and in 

20 effect have "signed off' on the provision of service and the type of service to be 
provided. Potential legal and financial liability is thereby reduced. Other features and 
advantages of the present invention will be apparent from the following more detailed 
description of the preferred embodiment, taken in conjunction with the accompanying 
drawings, which illustrate, by way of example, the principles of the invention. The 

25 scope of the invention is not, however, limited to this preferred embodiment. 



BRIEF DESCRIPTION OF THE DRAWINGS 
Figure 1 is a block flow diagram of a preferred approach for practicing the 
invention; and 

30 Figure 2 is a schematic illustration of a system for implementing the preferred 

approach of Figure 1. 
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DETAILED DESCRIPTION OF THE INVENTION 
Figure 1 depicts a preferred approach for practicing the method of the 
invention for controlling access to medical monitoring device service. A medical 
monitoring device and its associated system are provided, numeral 20. The medical 
5 monitoring device and medical monitoring system may be of any operable type, such 
as that disclosed in US Patent 5,959,529, whose disclosure is incorporated in its 
entirety, and modified as discussed herein. 

Figure 2 depicts the portions of a preferred form of a medical monitoring 
system 50 that are pertinent to the present invention. The medical monitoring system 
10 50 includes a medical monitoring device system 52, which in turn comprises the 
medical monitoring device 54 and a base station 56. The medical monitoring device 
54 is preferably a portable or remote monitoring unit of the type generally described 
in the '529 patent. The base station 56 has communication access to a central unit 58 
through a communication link such as a wireless cellular telephone transceiver link 60 
15 and/or a telephone land-line 62. In this embodiment, the base station 56 has a base 
station cradle 64 that receives the medical monitoring device 54 therein and 
establishes communication between the medical monitoring device 54 and an 



input/output device 65 that typically includes a microprocessor, communications 
controller, and communications hardware to establish the links 60 and/or 62. The 

20 input/output device 65 has a keypad 66 for inputting information and a display 68 to 
view the input information and other information to be displayed, as well as 
information transmitted to the input/output device 65. 

The central unit 58 has communications access to a variety of databases 71 
and to third-party sources 72, typically by telephone land-line 70. The databases 71 

25 may include prior patient records, general records, and the like. The third-party 
sources 72 may include, for example, financial sources 74, medical sources 76, and 
other sources 78. A financial source might be, for example, an insurance company, 
the social-security administration, or a credit-granting company. A medical source 
might be, for example, a specialist physician whose authorization is required before 

30 commencing the monitoring of the patient. Other third-party sources might be, for 
example, the company that maintains the medical monitoring device 54 and which is 
consulted to be certain that the specific medical monitoring device to be activated is 
approved for service. 
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The base station 56 ordinarily resides in the office of the agency that is 
providing the medical monitoring device 54 to a patient for the purpose of monitoring 
physiological parameters of the patient. Such an agency could be, for example, the 
patient's physician or a hospital. When the agency undertakes to provide the medical 
5 monitoring device 54 to the patient, the medical monitoring device 54 is docked with 
the base station 56, and the procedures described in relation to subsequent portions of 
Figure 1 are followed. 

Returning to Figure 1, a set of identification data elements are input into the 
medical monitoring device system 52, numeral 22, through the keypad 66 of the 
10 input/output device 65 of the base station 56 in the system 50 of Figure 2. The 
identification data elements may include, for example, a patient name, a patient 
address, a patient social security number, a patient sex, and an identification of the 
third-party financial source. The identifier of the medical monitoring device 54, such 
as its serial number, may be manually input in step 22, but more normally the 
15 identifier is automatically made available by the medical monitoring device 54 to the 
base station 56. 

The base station 56 may perform a prelimina r y evaluation of the set of 

identification data elements as to whether they meet a set of format requirements 
using software utility programs. Such basic format requirements are specified for 

20 each of the identification data elements. For example, a patient name should include 
only alphanumeric characters. If as typed into the keyboard the patient name includes 
other characters (e.g., a percent sign %), the base station recognizes the error and 
provides an input diagnostic message through the display 68 to prompt the input of 
correct information. In another example, a social security number must contain 10 

25 numerical digits, and may not contain letters or other characters. 

After what appears from the preliminary format evaluation to be a set of 
correct identification data elements is input to the medical monitoring device system 
52, the medical monitoring device system 52 establishes a communication link, 
numeral 24, to the central unit 58. The communication link is preferably through the 

30 land-line 62, but may be though the cellular telephone transmission link 60 if the 
land-line is not available. 

The medical monitoring device system 52 and the central unit 58 
cooperatively determine whether the medical monitoring device 54 may be activated 
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for rendering medical monitoring device service, numeral 26. The final decision is 
typically made by the central unit 58, although the medical monitoring device system 
52 may aid in data processing or may be called upon for additional input, such as 
where the patient name is found not to match with the social security number in other 
5 records. 

The step 26 of determining includes the steps of evaluating the set of 
identification data elements as to whether they meet a set of basic structural 
requirements, numeral 28, and obtaining third-party authorization from one or more 
of the third-party sources 72, numeral 30. The steps of evaluating 28 and obtaining 
10 30 are preferably performed automatically. "Automatically" means herein that the 
steps are performed without human action or intervention, except where a discrepancy 
occurs. The present system is organized to perform the evaluating and obtaining steps 
entirely by computer procedures, to minimize costs and take advantage of data 
collections at a variety of locations. The present approach may be performed using 
1 5 manual (i.e., human-performed) steps 28 and 30, but that is less desirable. 

The set of basic structural requirements that must be met may include the 

format requirements evaluated by the base station 56 , but ma y also include o ther 

structural requirements. For example, the central unit may check the database 71 to 
attempt to match the input patient name with a social security number that is already 
20 in the database 71 from prior medical contacts. If the patient name and the social 
security number that were input in step 22 do not match, then further inquiry may be 
made back to the medical monitoring device system 52. The failure to match the 
name and the social security number may arise from a simple inputting error, which 
can be corrected with revised input, or it may arise from a fraudulent attempt to obtain 
25 medical monitoring services that is detected by the procedures of step 28. 

The obtaining of third-party authorization in step 30 includes contacting 
appropriate third-party sources 72. The financial source 74 may be contacted to 
determine whether it authorizes the charges associated with the patient monitoring 
services. This authorization is particularly important for the business interests of the 
30 provider of the services, to avoid unpaid billings. Unpaid billings for medical 
services represents a major loss for many medical service companies. The medical 
source 76 may be contacted to determine whether it authorizes the patient monitoring. 
For example, if the prospective patient is being treated by more than one physician, it 
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may be important to obtain authorization from each physician who is treating the 
patient before medical monitoring services are commenced. In this case, 
"authorization" signals formal recognition by the authorizing party that monitoring 
information will be available. Other sources 78 may also be contacted to determine 
5 whether they authorize the patient monitoring. For example, it may be desirable to 
ensure that the company responsible for maintaining the specific medical monitoring 
device 54 that is to be activated authorizes its use. If a prior user had reported a 
problem and the specific medical monitoring device 54 had been taken out of service 
for repair, but was mistakenly to be re-activated without being repaired, the company 

10 responsible for the maintenance could prevent its activation at this stage. 

Thus, the procedures in step 26 act as a "sign off by a number of checks and 
third-parties to minimize the possibility that a medical monitoring device will be 
wrongly issued to a patient and activated. If the sign-offs are not completed, the 
medical monitoring device is not activated until the reason for the non-completion 

15 may be investigated. It is expected that in the great majority of cases, the activation 
determination of step 26 will be completed without incident and so rapidly that the 
checking will be transparent t o the patient and the issuer of the medical monitoring 
device. 

The activation decision is made, numeral 32. The final decision is typically 
20 made at the central unit 58. The decision is made at the central unit 58 because it has 

the access to the required information in step 26, and because it is more immune to 

tampering than is the base station 56. 

In the event that the identification data elements meet the set of basic 

structural requirements and third-party authorization is obtained, the central unit 58 
25 issues an activation signal to the medical monitoring device system 52 over the 

communication link 60 or 62, numeral 34. The medical monitoring device 54 is 

activated and enters service, numeral 36. 

The "activation signal" may be of any operable type. It may be as simple as a 

software "on" switch that enables the processing of data within a microprocessor in 
30 the medical monitoring device 54 or a hardware "on" switch that turns on particular 

hardware functions such as the communications links built into the medical 

monitoring device 54. The activation signal may be more complex, and may include 

identification of the patient and the specific medical monitoring device 54 that is 
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associated with that patient This activation signal may then be transmitted with each 
subsequent communication between the medical monitoring device 54 and the central 
unit 58 for identification purposes. In the event that the proper activation signal is not 
transmitted with each communication, it may be ignored. The activation may be 
5 revoked, numeral 38, at a later time if the authorization is withdrawn or for other 
reasons. Upon revocation 38, the signals transmitted by the medical monitoring 
device 54 are not acted upon, and the patient and/or issuing authority is notified and 
requested to return the medical monitoring device 54. As an alternative to revocation 
38, the activation signal of step 34 may include a maximum time limit for which 
1 0 activation is authorized, so that a further authorization is required to extend the period 
of authorized use. 

Although a particular embodiment of the invention has been described in 
detail for purposes of illustration, various modifications and enhancements may be 
made without departing from the spirit and scope of the invention. Accordingly, the 
1 5 invention is not to be limited except as by the appended claims. 
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CLAIMS 

What is claimed is: 

1 . A method for controlling access to medical monitoring device service, 
comprising the steps of: 

providing a medical monitoring device system having communications access to a 
central unit; 

inputting a set of identification data elements into the medical monitoring device 

system; 

the medical monitoring device system establishing a communication link with the 
central unit and communicating the set of identification data elements to the central unit; 

the medical monitoring device system and the central unit cooperatively determining 
whether the medical monitoring device may be activated for rendering medical monitoring 
device service, the step of determining including the steps of 

evaluating the set of identification data elements as to whether they meet a set 
of basic structural requirements, and 

obtaining autHorizatiohJfrom a third : parify source; and," inthe event that the 
identification data elements meet the set of basic structural requirements and authorization is 
obtained, 

issuing an activation signal to the medical monitoring device system over the 
communication link. 

2. The method of claim 1 , wherein the medical monitoring device system 
comprises a patient-portable unit. 

3 . The method of claim 1 , including an additional step, after the step of issuing 
an activation signal, of 

the patient-portable unit subsequently communicating with the central unit, and 
the patient-portable unit including the activation signal in the subsequent 
communications with the central unit. 

4. The method of claim 1 , wherein the medical monitoring device system 
comprises a patient-portable unit and a base station in communication with the 
patient-portable unit. 

5. The method of claim 1 , wherein the communication link is a land-line. 
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6. The method of claim 1, wherein the communication link is a wireless link. 

7. The method of claim 1 , wherein the set of identification data elements is 
selected from the group consisting of a patient name, a patient address, a patient social 
security number, a patient sex, and an identification of the third-party financial source. 

8. The method of claim 1 , wherein the steps of evaluating and obtaining are 
performed by the central unit. 

9. The method of claim 1 , wherein the steps of evaluating and obtaining are 
performed automatically. 

1 0. The method of claim 1 , wherein the step of inputting includes the step of the 
medical monitoring device system locally performing a preliminary evaluation of the set of 
identification data elements as to whether they meet a set of format requirements, and 

the medical monitoring device system providing an input diagnostic message in the 
event that the step of performing a preliminary evaluation determines that the set of 
identification data elements does not meet the set of format requirements. 

1 1 . The method of claim 1 , wherein the third-party source is selected from the 

group consisting of an insurance company, the social security administration , and a 

credit-granting company. 

12. A method for controlling access to medical monitoring device service to a 
patient, comprising the steps of: 

providing a medical monitoring device system having communications access to a 
central unit, wherein the medical monitoring device system comprises a patient-portable unit 
and a base station in communication with the patient-portable unit; 

inputting a set of identification data elements into the medical monitoring device 

system; 

the medical monitoring device system establishing a communication link with the 
central unit and communicating the set of identification data elements to the central unit; 

the central unit determining whether the medical monitoring device may be activated 
for rendering medical monitoring device service, the step of determining including the steps 
of 

automatically evaluating the set of identification data elements as to whether 
they meet a set of basic structural requirements, and 
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automatically obtaining financial authorization from a third-party financial 
source; in the event that the identification data elements meet the set of basic structural 
requirements and financial authorization is obtained, 

the central unit issuing an activation signal to the medical monitoring device system 
over the communication link; 

the patient-portable unit activating responsive to the activation signal; and thereafter 
the patient-portable unit providing medical monitoring device service to the patient. 

1 3 . The method of claim 1 2, including an additional step, after the step of the 
central unit issuing an activation signal, of 

the patient-portable unit subsequently communicating with the central unit, and 
the patient-portable unit including the activation signal in the subsequent 
communications with the central unit. 

14. The method of claim 12, wherein the communication link is a land-line. 

1 5 . The method of claim 1 2, wherein the communication link is a wireless link. 

16. The method of claim 12, wherein the set of identification data elements is 
selected from the group consisting of a patient name, a patient address , a patient social 
security number, a patient sex, and an identification of the third-party financial source. 

1 7. The method of claim 12, wherein the step of inputting includes the step of 
the medical monitoring device system locally performing a preliminary evaluation of 

the set of identification data elements as to whether they meet a set of format requirements, 
and 

the medical monitoring device system providing an input diagnostic message in the 
event that the step of performing a preliminary evaluation determines that the set of 
identification data elements does not meet the set of format requirements. 

1 8. The method of claim 1 2, wherein the third-party financial source is selected 
from the group consisting of an insurance company, the social security administration, and a 
credit-granting company. 

1 9. A method for controlling access to medical monitoring device service, 
comprising the steps of: 

providing a medical monitoring device system having communications access to a 
central unit; 
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the medical monitoring device system establishing a communication link with the 
central unit and communicating the set of identification data elements to the central unit; 

the medical monitoring device system and the central unit cooperatively determining 
whether the medical monitoring device system may be activated for rendering medical 
monitoring device service, the step of determining including the steps of 

automatically evaluating the set of identification data elements as to whether 
they meet a set of basic structural requirements, and 

automatically obtaining third-party authorization from a third-party source; 
and, in the event that the identification data elements meet the set of basic structural 
requirements and third-party authorization is obtained, 

issuing an activation signal to the medical monitoring device system over the 
communication link. 
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